Senior DFIR Forensics & Incident Response Lead (Remote UK)

VulnU; United Kingdom; Remote; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Paid parental leave

Flexible PTO

Retirement match

Learning budget

Equity

Job summary

Arctic Wolf is seeking a Senior Incident Response Forensics Analyst to join our remote UK-based team. You will conduct forensic investigations of network intrusions and email compromises, performing host, network, and cloud forensics across Windows, Linux, and macOS environments.

You will mentor junior analysts, lead case updates, and communicate findings clearly to clients and counsel. A strong DFIR background and cloud forensics experience are essential.

Qualifications

• 3+ years in digital forensics and incident response or similar cybersecurity roles.
• Experience with IR tools and malware analysis in Windows/Linux/macOS environments.
• Cloud forensics experience (Azure/AWS/GCP) preferred.

Responsibilities

• Conduct forensic investigations of network intrusions and compromised environments.
• Perform host and network analysis using diverse logs and tools.
• Lead investigations, scope cases, and mentor junior analysts.
• Communicate findings to clients and legal teams and contribute to incident reports.
• Stay current with DFIR developments and publish threat insights.

Skills

Digital forensics

Incident response

Windows forensics

Linux forensics

Mac forensics

Network analysis

Threat intelligence

Scripting

Mentoring

Education

Bachelor’s Degree in Information Security

GCFA/GCFE or equivalent

Tools

Magnet AXIOM

EnCase

FTK

X-Ways

SIFT

Job description

Arctic Wolf is seeking a Senior Incident Response Forensics Analyst to join our remote UK-based team. You will conduct forensic investigations of network intrusions and email compromises, performing host, network, and cloud forensics across Windows, Linux, and macOS environments.

You will mentor junior analysts, lead case updates, and communicate findings clearly to clients and counsel. A strong DFIR background and cloud forensics experience are essential.